CVE-2007-1537: Microsoft Windows 2003 Server

Low severity, CVSS 3.6. EPSS: 1.3% chance of exploitation in the next 30 days.

\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.

Affected products

• Microsoft Windows 2003 Server: version sp1 only
• Microsoft Windows XP: any version

Published 2007-03-20. Last modified 2026-06-16.